$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: NEe1ksYmx5U+dRz7wmQVBEGgLecLbS8dhDe+Fsq0MOE= Subject key identifier: 4E:FF:68:E7:2E:62:F2:F4:0A:CC:CE:37:8E:D9:FB:6E:DE:9F:C6:56 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1BBF Signing time: Thu 24 Apr 2025 16:15:14 +0000 Manifest this update: Thu 24 Apr 2025 16:15:13 +0000 Manifest next update: Thu 01 May 2025 16:15:13 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: xYcyHq5NYZ4cRB19G3+vPKY3nw+n6KdTxB7puwuedIU=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7134 (0x1bde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Apr 24 16:15:13 2025 GMT Not After : May 1 16:15:13 2025 GMT Subject: CN=680a6391-a716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:e0:20:f6:d6:5d:e4:fc:39:c2:ea:ef:7d: 28:39:a9:b8:16:17:8b:7b:5e:d8:68:04:7a:be:be: 8a:29:91:f8:7c:55:58:6d:3b:55:2f:75:06:f4:90: e0:6e:d2:5a:31:02:22:a4:fc:85:5c:f2:d1:c0:fe: 26:36:6c:a8:07:18:93:b1:2e:3c:a8:0d:39:bf:d7: 45:92:f0:50:b7:66:27:da:dc:a4:b5:8b:65:9e:df: b4:9c:ef:f5:a9:51:9b:3b:7c:86:7b:8e:f4:56:1e: 5d:ef:d5:4e:e3:81:5c:58:36:df:9f:fe:1a:84:eb: b8:a7:8f:c7:d2:b8:7a:1c:64:0c:48:fe:06:e7:cf: ad:24:15:f3:70:5e:f4:b1:65:8b:b1:ca:30:10:f1: 38:09:83:de:d3:df:d3:ef:8e:aa:2e:7c:c9:14:a5: 2e:da:3c:12:ea:7c:ec:51:a8:f9:a1:f1:45:fe:7e: d4:be:f6:48:ea:8c:6d:fd:0c:0f:37:c3:f3:1a:3e: 05:e8:4b:c3:93:21:19:ae:f8:11:a3:39:e5:85:10: f0:48:ec:c5:1e:6a:0d:ab:3d:f2:36:94:22:7d:2d: 05:6e:f7:22:ae:73:f4:8a:91:cb:98:d7:1e:76:b9: 36:77:ab:76:31:67:4c:42:e6:c4:b7:bb:4b:f5:84: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:68:E7:2E:62:F2:F4:0A:CC:CE:37:8E:D9:FB:6E:DE:9F:C6:56 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:53:81:8e:11:61:96:c9:86:31:78:5e:99:0b:62:85:63:cf: a0:90:df:29:aa:8c:8d:92:8b:ba:df:90:15:bb:35:b6:5a:c8: 13:7d:99:a0:52:32:39:ad:e8:0a:4d:bb:d3:30:ad:1b:aa:5d: 51:25:60:db:53:c9:1f:3d:3a:5a:8e:41:23:19:6b:ce:81:aa: 3f:52:9a:2c:bc:ee:74:6d:b6:18:d5:3d:7c:03:ac:94:9c:79: 79:19:63:4f:f8:75:24:de:bd:74:e2:b2:01:80:6b:a6:61:21: 7a:4e:8c:a5:60:7d:1b:50:d2:01:0a:1a:68:d7:58:17:a9:74: bd:0d:f4:c8:85:74:01:36:77:19:b7:15:7c:f7:55:32:ba:c2: 9d:ed:ec:b7:9c:10:1f:cc:a6:d7:38:db:93:6c:66:e2:34:73: 5c:8b:f8:75:27:d1:ed:19:09:a0:9b:12:86:fa:31:0c:a5:94: 67:5a:86:ea:24:0a:b0:8a:bb:12:07:2b:e0:4f:27:43:a3:cb: b7:8d:2e:3e:7d:ac:08:9e:54:3a:17:cc:3c:0a:88:86:e9:24: 1f:c0:cb:b0:f3:e3:57:6c:c8:90:88:5f:9b:5d:79:d9:90:d8: 04:d3:81:f6:6d:72:44:ac:0d:bb:70:18:21:83:6f:3e:d6:59: 9f:ce:af:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjUwNDI0MTYxNTEzWhcNMjUwNTAxMTYxNTEzWjAYMRYwFAYD VQQDEw02ODBhNjM5MS1hNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+ngIPbWXeT8OcLq730oOam4FheLe17YaAR6vr6KKZH4fFVYbTtVL3UG9JDg btJaMQIipPyFXPLRwP4mNmyoBxiTsS48qA05v9dFkvBQt2Yn2tyktYtlnt+0nO/1 qVGbO3yGe470Vh5d79VO44FcWDbfn/4ahOu4p4/H0rh6HGQMSP4G58+tJBXzcF70 sWWLscowEPE4CYPe09/T746qLnzJFKUu2jwS6nzsUaj5ofFF/n7UvvZI6oxt/QwP N8PzGj4F6EvDkyEZrvgRoznlhRDwSOzFHmoNqz3yNpQifS0FbvcirnP0ipHLmNce drk2d6t2MWdMQubEt7tL9YSNBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7/aOcu YvL0CszON47Z+27en8ZWMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGU4GOEWGWyYYxeF6ZC2KFY8+gkN8pqoyNkou635AVuzW2WsgTfZmg UjI5regKTbvTMK0bql1RJWDbU8kfPTpajkEjGWvOgao/UposvO50bbYY1T18A6yU nHl5GWNP+HUk3r104rIBgGumYSF6ToylYH0bUNIBChpo11gXqXS9DfTIhXQBNncZ txV891UyusKd7ey3nBAfzKbXONuTbGbiNHNci/h1J9HtGQmgmxKG+jEMpZRnWobq JAqwirsSByvgTydDo8u3jS4+fawInlQ6F8w8CoiG6SQfwMuw8+NXbMiQiF+bXXnZ kNgE04H2bXJErA27cBghg28+1lmfzq+c -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:57 2025 by rpki-client